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PROTECTION OF ELECTROMC CONTENT 

TECHNICAL FIELD 

5 This application relates to protecting against unauthorized capturing of electronic content. 

BACKGROUND 

Subscribers to onUne services have virtually on-demand access to news, weather, 
financial, sports, and entertainment services as well as the ability to transmit electronic messages 
id and to participate in online discussion groups. For example, subscribers of online service 
^jj providers such as America Online or CompuServe may view and retrieve information on a wide 
f y variety of topics from repositories located throughout the world. Subscribers may perceive 
^ online content in a variety of ways. For example, a subscriber may read a document, view an 
^ =^ image, or listen to a song while online. 
15 

[I SUMMARY 

i J, The systems and techniques described here provide a simple yet effective mechanism for 

allowing users to access electronic content while at the same time preventing users from copying 
or otherwise capturing the electronic content. As a result, content providers have an increased 

20 ability to control the usage and distribution of their electronic content. The systems and 
techniques are particularly useftil with respect to digital images. 

In one general aspect, a computer-implemented method of protecting content includes 
receiving a request from a user to access the content. Based on the request received from the 
user, the user is allowed to perceive the content but is prevented from capturing the content. 

25 Implementations may include one or more of the following features. For example, an 

indicator may be presented to indicate the presence of the content, with the indicator differing 
from the content. In one implementation, the content may be an image and the indicator may 
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include a display area that is substantially the same size as the image and is substantially at the 
same location as the image. The indicator may include text that directs the user to press and hold 
an input device when a graphical interface tool is positioned over the indicator in order to 
perceive the content. 

5 Allowing the user to perceive the content may include presenting the content to the user 

when the user activates an input device after positioning the graphical interface tool over the 
indicator. The user may be prevented from capturing the content by limiting activities of the user 
while the input device is being used to perceive the content. For instance, activation of another 
device may be prevented while the input device is being used to perceive the content. The 

IQ functionality of the input device itself also may be limited to prevent the input device from being 

f □ used to capture content that the input device is being used to access and/or perceive. 

)^ The content may be presented in a browser window to allow perception of content by the 

user. In this manner, the user may be prevented from capturing the content by preventing the 

B user from accessing a browser apphcation that otherwise enables copying and saving of the 

i=5 content. 

Preventing the user from capturing the content may also include preventing a perception 

C3 of the content whenever the user attempts to capture the content. 

An icon that differs from the content and that indicates a presence of the content may be 
presented. The content may include an image and preventing the user from capturing the content 

20 may include preventing the user from copying or saving the image. Presenting the icon may 

include displaying the icon in an area that has a size and a location that are substantially the same 
as a size and a location of the image. Presenting the icon may also include directing the user to 
operate an input device in a prescribed manner to request access to the content when a graphical 
interface tool is positioned over the icon. 

25 Receiving a request from the user to access the content may include receiving input from 

a user corresponding to the positioning of a graphical interface tool over the icon. Preventing the 
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user from capturing the content may include preventing the user from using a single device to 
both present and capture the content. 

Preventing the user from capturing the content may include preventing perception of the 
content whenever the user attempts to capture the content. 
5 The method may be performed by a Java applet. The content may reside at a webpage, 

and the content may be described in hyper-text markup language (HTML). The request received 
from the user to access the content may include instructions from the user to access a document, 
with the instructions including a network address of the document. 

The user may be enabled to perceive the content by displaying an image or otherwise 
16 making content perceivable. For instance, the content may include sound and the user may 
f ^ perceive the content by playing the sound, the content may include text and the user may 

perceive the content by displaying the text, or the content may include video and the user may 
== perceive the content by playing the video. 

The features may be embodied in a method as described above, may be embodied in a 
-33 computer program, or they may be performed by one or more physical elements, structures 
r= and/or systems. 

H The details of one or more implementations are set forth in the accompanying drawings 

'"^ and the description provided below. Other features and advantages will be apparent from the 
description, the drawings, and the claims. 

20 

DRAWING DESCRIPTIONS 
Fig. 1 is a block diagram of a computer system. 
Fig. 2 shows a typical graphical user interface (GUI) enviroiunent. 
Fig. 3 is a screenshot of a browser application window. 
25 Fig. 4 is a block diagram of a communications system. 

Figs. 5-9 are expansions of the block diagram of Fig. 4. 
Fig. 10 is a flow chart of a communications method. 
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Figs. 1 1-16 are screen shots illustrating a mechanism for preventing a digital image from 



being copied. 



Like reference numbers and designations in the various drawings indicate like elements. 



Network users view and increasingly copy digital images, also referred to as electronic 
images and other electronic content that appear on webpages, even when not authorized to do so. 
Such images may be the property of content providers who intend to provide visual access to 
their webpages and the images in these webpages, but who may not intend to enable copying of 
the webpages or images by imauthorized users. The present inventor recognized that it would be 
advantageous to provide content providers with a mechanism for preventing users from copying 
online digital images while still allowing users to view the images. To this end, the following 
discussion is directed to preventing unauthorized capturing of an online digital image, or any 
other electronic content that may be perceived by a user. 

The computer system 100 illustrated in Fig. 1 represents a hardware setup for executing 
software that allows a user to perform tasks such as communicating with other computer users, 
accessing various computer resources, and viewing, creating, or otherwise manipulating 
electronic content — that is, any combination of text, images, movies, music or other sounds, 
animations, 3D virtual worlds, and links to other objects. The computer system 100 of Fig. 1 
may also be programmed with computer-readable instructions to enable content to be perceived 
(for example, viewed) without being captured (for example, copied, saved, or printed). 

The system includes various input/output (I/O) devices (mouse 103, keyboard 105, display 
107) and a general purpose computer 100 having a central processor unit (CPU) 121, an I/O vmit 
117 and a memory 109 that stores data and various programs such as an operating system 111, 
and one or more application programs 113. The computer system 100 preferably also includes 
some sort of communications card or device 123 (for example, a modem or network adapter) for 
exchanging data with a network 127 via a communications link 125 (for example, a telephone 
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line). 

As shown in Fig. 2, using network 127, a user of a computer system can access electronic 
content or other resources either stored locally at the user's own client system 202 (for example, a 
personal or laptop computer), remotely at one or more server systems 200, or at other client 
5 systems 202. An example of a server system 200 is a host computer that provides subscribers 
with online computer data and services such as e-mail, e-commerce, chat rooms, Internet access, 
electronic newspapers and magazines, etc. 

Users of a host computer's online services typically communicate with one or more central 
server systems 200 through chent software executing on their respective client systems 202. hi 
l| practice, a server system 200 typically will not be a single monolithic entity but rather will be a 
I I; network of interconnected server computers, possibly physically dispersed from each other, each 
dedicated to its own set of duties and/or to a particular geographical region, hi such a case, the 
server computers are interconnected by a network of conraiunication links. 

Each client system 202 runs client soflAvare that enables communication with 
It corresponding software rurming on the server system 200. The client systems 202 communicate 
M with the server system 200 through various channels 204 and lines 206, such as a modem 
□ connected to a telephone line, a direct hitemet connection using a transfer protocol such as 

TCP/IP (Transfer Control Protocol/Internet Protocol), cable, integrated services digital network 
(ISDN), or other transfer protocols. The server system 200 is responsible for receiving input 
20 from the chent systems 202, manipulating the collective body of input information (and possibly 
information from other sources) into a usefiil format, and retransmitting the formatted 
information back to one or more clients 202 for output on an output device, such as a display 
screen. 

A "browser" is an example of client sofl^vare that enables users to access and view 
25 electronic content stored either locally or remotely, such as in a network environment of 

interconnected computer systems (for example, local area network (LAN), wide area network 
(WAN), intranet, Intemet). A browser typically is used for displaying documents described in 
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Hyper-Text Markup Language (HTML) and stored on servers connected to a network such as the 
Internet. A user instructs a browser to access an electronic document ("webpage") by specifying 
a network address or Uniform Resource Locator (URL) - indicating the location of a desired 
webpage. In response, the browser contacts the corresponding server 200 hosting the requested 
webpage, retrieves the one or more files that make up the webpage, and then displays the 
webpage in a window on the user's computer screen. 

Fig. 3 is a screenshot of a browser apphcation 300 (Microsoft Intemet Explorer) 
displaying a typical webpage 302. As shown therein, a single webpage 302 may be composed of 
several different files potentially of different data types 304 (for example, text, graphics, images, 
virtual worlds, sounds, and movies). In addition, a webpage 302 can include links 306 pointing 
to other resources (for example, other webpages or individual files) available at the server system 
200 or through the network 127. Links 306 can take virtually any visual form, for example, they 
can appear either as a text string or as a graphical image or a combination thereof Each link 306 
has an associated URL pointing to a location on the network 127. When a user selects a 
displayed link 306, the browser automatically will retrieve the webpage (or other resource) 
corresponding to the URL associated with the link and will display and execute the electronic 
information at the retrieved webpage or resource. 

For illustrative purposes. Figs. 4-9 describe a communications system for implementing 
techniques for transferring files between subscribers of a host complex. Referring to Fig. 4, a 
communications system 400 is capable of delivering and exchanging data between a client 
system 405 and a host system 410 through a communications link 415. The client system 405 
typically includes one or more client devices 420 and/or client controllers 425. For example, the 
client system 405 may include one or more general-purpose computers (for example, personal 
computers), one or more special-purpose computers (for example, devices specifically 
programmed to communicate with each other and/or the host system 410), or a combination of 
one or more general-purpose computers and one or more special-purpose computers. The client 
system 405 may be arranged to operate within or in concert with one or more other systems, such 
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as for example, one or more Local Area Networks (LANs) and/or one or more Wide Area 
Networks (WANs). 

The client device 420 is generally capable of executing instructions under the command 
of a client controller 425. The client device 420 is connected to the client controller 425 by a 
5 wired or wireless data pathway 430 capable of delivering data. 

The client device 420 and client controller 425 each typically includes one or more 
hardware components and/or software components. An example of a client device 420 is a 
general-purpose computer (for example, a personal computer) capable of responding to and 
executing instructions in a defined manner. Other examples include a special-purpose computer, 
l| a workstation, a server, a device, a component, other physical or virtual equipment or some 
I^' combination thereof capable of responding to and executing instructions. An example of client 
CO controller 425 is a software application loaded on the client device 420 for conmianding and 

directing communications enabled by the client device 420. Other examples include a program, 
■ " a piece of code, an instruction, a device, a computer, a computer system, or a combination 
is thereof, for independently or collectively instructing the client device 420 to interact and operate 
ll as described herein. The client controller 425 may be embodied permanently or temporarily in 
any type of machine, component, physical or virtual equipment, storage medium, or propagated 
signal capable of providing instructions to the client device 420. 

The conmiunications link 415 typically includes a delivery network 460 making a direct 
20 or indirect communication between the client system 405 and the host system 410, irrespective of 
physical separation. Examples of a delivery network 460 include the Internet, the World Wide 
Web, WANs, LANs, analog or digital wired and wireless telephone networks (for example, 
PSTN, ISDN, and xDSL), radio, television, cable, satellite, and/ or any other delivery mechanism 
for carrying data. The communications link 415 may include conmiunication pathways 450, 455 
25 that enable communications through the one or more delivery networks 460 described above. 
Each of the communication pathways 450, 455 may include, for example, a wired, wireless, 
cable or satellite communication pathway. 
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The host system 410 includes a host device 435 capable of executing instructions under 
the command and direction of a host controller 440. The host device 435 is connected to the host 
controller 440 by a wired or wireless data pathway 445 capable of carrying and delivering data. 
The host system 410 typically includes one or more host devices 435 and/or host 
5 controllers 440. For example, the host system 410 may include one or more general-purpose 
computers (for example, personal computers), one or more special-purpose computers (for 
example, devices specifically programmed to communicate with each other and/or the client 
system 405), or a combination of one or more general-purpose computers and one or more 
special-purpose computers. The host system 410 may be arranged to operate within or in concert 
l5 with one or more other systems, such as, for example, one or more LANs and/or one or more 
5J WANs. 

Co The host device 435 and host controller 440 each typically includes one or more hardware 

components and/or software components. An example of a host device 435 is a general-purpose 
' computer (for example, a personal computer) capable of responding to and executing instructions 
15 in a defined manner. Other examples include a special-purpose computer, a workstation, a server, 
U a device, a component, other physical or virtual equipment or some combination thereof capable 
JlJ of responding to and executing instructions. An example of host controller 440 is a software 
application loaded on the host device 435 for commanding and directing communications 
enabled by the host device 435. Other examples include a program, a piece of code, an 
20 instruction, a device, a computer, a computer system, or a combination thereof, for independently 
or collectively instructing the host device 435 to interact and operate as described herein. The 
host controller 440 may be embodied permanently or temporarily in any type of machine, 
component, physical or virtual equipment, storage medium, or propagated signal capable of 
providing instructions to the host device 435. 
25 Fig. 5 illustrates a communication system 500 including a client system 505 

communicating with a host system 510 through a communications link 515. Client system 505 
typically includes one or more client devices 520 and one or more client controllers 525 for 

8 



PATENT 

ATTORNEY DOCKET NO. 06975/070001 



controlling the client devices 520. Host system 510 typically includes one or more host devices 
535 and one or more host controllers 540 for controlling the host devices 535. The 
conmiunications link 515 may include conmiunication pathways 550, 555 enabling 
conmiimications through the one or more delivery networks 560. 
5 Examples of each element within the communication system of Fig. 5 are broadly 

described above with respect to Fig. 4. In particular, the host system 510 and communications 
link 515 typically have attributes comparable to those described with respect to host system 410 
and communications link 415 of Fig. 4, respectively. Likewise, the client system 505 of Fig. 5 
typically has attributes comparable to and may illustrate one possible embodiment of the client 
iq system 405 of Fig. 4. 

^ The client device 520 typically includes a general purpose computer 570 having an 

CD internal or external storage 572 for storing data and programs such as an operating system 574 
'I (for example, DOS, Windows™, Windows 95™, Windows 98™, Windows 2000™, Windows 

I y NT^^, OS/2, and Linux) and one or more application programs. Examples of application 

1=5 programs include authoring applications 576 (for example, word processing, database programs, 

I I spreadsheet programs, and graphics programs) capable of generating documents or other 

^i: electronic content; client appHcations 578 (for example, AOL client, CompuServe client, AIM 

C3 client, AOL TV client, and ISP client) capable of communicating with other computer users, 
accessing various computer resources, and viewing, creating, or otherwise manipulating 

20 electronic content; and browser applications 580 (for example, Netscape's Navigator and 
Microsoft's Internet Explorer) capable of rendering standard Internet content. 

The general-purpose computer 570 also includes a central processing unit (CPU) 582 for 
executing instructions in response to commands from the client controller 525. In one 
implementation, the client controller 525 includes one or more of the application programs 

25 installed on the internal or external storage 572 of the general-purpose computer 570. In another 
implementation, the client controller 525 includes application programs externally stored in and 
performed by one or more device(s) external to the general-purpose computer 570. 
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The general-purpose computer typically will include a communication device 584 for 
sending and receiving data. One example of the communication device 584 is a modem. Other 
examples include a transceiver, a set-top box, a communication card, a satellite dish, an antenna, 
or another network adapter capable of transmitting and receiving data over the communications 
5 link 5 1 5 through a wired or wireless data pathway 550. The general-purpose computer 570 also 
may include a television (TV) tuner 586 for receiving television programming in the form of 
broadcast, satellite, and/or cable TV signals. As a result, the client device 520 can selectively 
and/or simultaneously display network content received by communications device 584 and 
television programming content received by the TV tuner 586. 
I| The general-purpose computer 570 typically will include an input/output interface 588 to 

^l: enable a wired or wireless connection to various peripheral devices 590. Examples of peripheral 
CO devices 590 include, but are not limited to, a mouse 591, a mobile phone 592, a personal digital 

assistant (PDA) 593, a keyboard 594, a display monitor 595 with or without a touch screen input, 
^ ^ and/or a TV remote control 596 for receiving information from and rendering information to 
IS subscribers. Other examples may include voice recognition and synthesis devices. 

U Although Fig. 5 illustrates devices such as a mobile telephone 592, a PDA 593, and a TV 

f fi 

remote control 596 as being peripheral with respect to the general-purpose computer 570, in 
another implementation, such devices may themselves include the functionality of the general- 
purpose computer 570 and operate as the cUent device 520. For example, the mobile phone 592 
20 or the PDA 593 may include computing and networking capabilities and function as a client 

device 520 by accessing the delivery network 560 and communicating with the host system 510. 
Furthermore, the client system 505 may include one, some or all of the components and devices 
described above. 

Referring to Fig. 6, a communications system 600 is capable of delivering and 
25 exchanging information between a client system 605 and a host system 610 through a 

conmiunication link 615. Client system 605 typically includes one or more client devices 620 
and one or more client controllers 625 for controlling the client devices 620. Host system 610 
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typically includes one or more host devices 635 and one or more host controllers 640 for 
controlling the host devices 635. The communications link 615 may include communication 
pathways 650, 655 enabling communications through the one or more delivery networks 660. 
Examples of each element within the communication system of Fig. 6 are broadly 
5 described above with respect to Figs. 4 and 5. In particular, the client system 605 and the 

communications Hnk 615 typically have attributes comparable to those described with respect to 
client systems 405 and 505 and communications links 415 and 515 of Figs. 4 and 5, respectively. 
Likewise, the host system 610 of Fig. 6 may have attributes comparable to and may illustrate 
one possible embodiment of the host systems 410 and 510 shown in Figs. 4 and 5, respectively. 

1 9 The host system 610 includes a host device 635 and a host controller 640. The host 

^•j controller 640 is generally capable of transmitting instructions to any or all of the elements of the 
Co host device 635. For example, in one implementation, the host controller 640 includes one or 
l~ more software applications loaded on the host device 635. However, in other implementations, 

as described above, the host controller 640 may include any of several other programs, machines, 
|5 and devices operating independently or collectively to control the host device 635. 
u The host device 635 includes a login server 670 for enabling access by subscribers and 

routing communications between the client system 605 and other elements of the host device 
635. The host device 635 also includes various host complexes such as the depicted Online 
Service Provider (OSP) host complex 680 and Instant Messaging (IM) host complex 690. To 

20 enable access to these host complexes by subscribers, the client system 605 may include 
communication software, for example, an OSP client application and an IM client application. 
The OSP and IM communication software applications are designed to facilitate the subscriber's 
interactions with the respective services and, in particular, may provide access to all the services 
available within the respective host complexes. For example. Instant Messaging allows a 

25 subscriber to use the IM client application to view whether particular subscribers (buddies) are 
online, exchange instant messages with particular subscribers, participate in group chat rooms, 

11 



PATENT 

ATTORNEY DOCICET NO. 06975/070001 



trade files such as pictures, invitations or documents, find other subscribers with similar interests, 
get customized news and stock quotes, and search the Web. 

Typically, the OSP host complex 680 supports different services, such as email, 
discussion groups, chat, news services, and Internet access. The OSP host complex 680 is 
5 generally designed with an architecture that enables the machines within the OSP host complex 
680 to communicate with each other, certain protocols (that is, standards, formats, conventions, 
rules, and structures) being employed to enable the transfer of data. The OSP host complex 680 
ordinarily employs one or more OSP protocols and custom dialing engines to enable access by 
selected chent applications. The OSP host complex 680 may define one or more specific 
JQ protocols for each service based on a common, underlying proprietary protocol. 
^ The IM host complex 690 is generally independent of the OSP host complex 680, and 

CO supports instant messaging services regardless of a subscriber's network or Intemet access. Thus, 
1= the IM host complex 690 allows subscribers to send and receive instant messages, whether or not 
- ^ they have access to any particular ISP. The IM host complex 690 may support associated 
hi services, such as administrative matters, advertising, directory services, chat, and interest groups 
u related to the instant messaging. The IM host complex 690 has an architecture that enables all of 
the machines within the IM host complex to communicate with each other. To transfer data, the 
IM host complex 690 employs one or more standard or exclusive IM protocols. 

The host device 635 may include one or more gateways that connect and therefore link 
20 complexes, such as the OSP host complex gateway 685 and the IM host complex gateway 695. 
The OSP host complex gateway 685 and the IM host complex 695 gateway may directly or 
indirectly link the OSP host complex 680 with the IM host complex 690 through a wired or 
wireless pathway. Ordinarily, when used to facilitate a link between complexes, the OSP host 
complex gateway 685 and the IM host complex gateway 695 are privy to information regarding a 
25 protocol anticipated by a destination complex, which enables any necessary protocol conversion 
to be performed incident to the transfer of data fi'om one complex to another. For instance, the 
OSP host complex 680 and IM host complex 690 may use different protocols such that 
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transferring data between the complexes requires protocol conversion by or at the request of the 
OSP host complex gateway 685 and/or the IM host complex gateway 695. 

Referring to Fig. 7, a communications system 700 is capable of delivering and 
exchanging information between a client system 705 and a host system 710 through a 
5 communication link 715. CKent system 705 typically includes one or more client devices 720 
and one or more client controllers 725 for controlling the client devices 720. Host system 710 
typically includes one or more host devices 735 and one or more host controllers 740 for 
controlling the host devices 735. The communications link 715 may include communication 
pathways 750, 755 enabling communications through the one or more delivery networks 760. 
IS As shown, the client system 705 may access the Internet 765 through the host system 710. 

Examples of each element within the communication system of Fig. 7 are broadly 
eg described above with respect to Figs. 4-6. In particular, the client system 705 and the 

communications link 715 typically have attributes comparable to those described with respect to 
client systems 405, 505, and 605 and communications links 415, 515, and 615 of Figs. 4-6, 

E 

k5 respectively. Likewise, the host system 710 of Fig. 7 may have attributes comparable to and may 
u illustrate one possible embodiment of the host systems 410, 5 10, and 610 shown in Figs. 4-6, 
Jl; respectively. However, Fig. 7 describes an aspect of the host system 710, focusing primarily on 
O one particular implementation of OSP host complex 780. 

The chent system 705 includes a client device 720 and a chent controller 725. The client 
20 controller 725 is generally capable of establishing a connection to the host system 710, including 
the OSP host complex 780, the IM host complex 790 and/or the Internet 765. In one 
implementation, the client controller 725 includes an OSP application for communicating with 
servers in the OSP host complex 780 using OSP protocols that may or may not be exclusive or 
proprietary. The client controller 725 also may include applications, such as an EM client 
25 application and/or an Internet browser application, for communicating with the IM host complex 
790 and the Internet 765 . 
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The host system 710 includes a host device 735 and a host controller 740. The host 
controller 740 is generally capable of transmitting instructions to any or all of the elements of the 
host device 735. For example, in one implementation, the host controller 740 includes one or 
more software applications loaded on one or more elements of the host device 735. However, in 
5 other implementations, as described above, the host controller 740 may include any of several 
other programs, machines, and devices operating independently or collectively to control the host 
device 735. 

The host device 735 includes a login server 770 capable of enabling communications 
between chent systems 705 and various elements of the host system 710, including elements 
\i such as OSP host complex 780 and IM host complex 790. The login server 770 may implement 
Cn one or more authorization procedures to enable simultaneous access to one or more of these 
[□ elements. 

The OSP host complex 780 and the IM host complex 790 are typically connected through 
one or more OSP host complex gateways 785 and one or more IM host complex gateways 795. 
p Each OSP host complex gateway 785 and IM host complex gateway 795 may generally perform 
12 protocol conversions necessary to enable communication between one or more of the OSP host 
complex 780, the IM host complex 790, and the Internet 765. 

1, -i 

Q The OSP host complex 780 supports a set of services to be accessed through and/or 

performed by from one or more servers located internal to and external from the OSP host 

20 complex 780. Servers extemal to the OSP host complex 780 may communicate using the 
Intemet 765. Servers internal to the OSP complex 780 may be arranged in one or more 
configurations. For example, servers may be arranged in large centralized clusters identified as 
farms 7802 or in locaUzed clusters identified as pods 7804. 

More specifically, farms 7802 are groups of servers located at centralized locations within 

25 the OSP host complex 780. Farms 7802 generally are dedicated to providing particular 

fimctionality and services to subscribers and clients from a centralized location, regardless of the 
location of the subscriber or client. Farms 7802 are particularly usefiil for providing services that 
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depend upon other remotely-located or performed processes and services for information, such 
as, for example, chat, email, instant messaging, news, newsgroups, search, stock updates, and 
weather. Thus, farms 7802 tend to rely on connections with external resources such as the 
Intemet 765 and/or other servers within the OSP host complex 780. 
5 By contrast to farms 7802, pods 7804 are clusters of locahzed servers that provide some 

services offered by the OSP host complex 780 from a location local to the service or information 
recipient, thus reducing and avoiding time delays and congestion inherent in centralized 
processing. Each pod 7804 includes one or more interrelated servers capable of operating 
together to provide one or more services offered by the OSP host complex 780 in a 

y geographically localized manner, the servers within a pod 7804 generally operating 

C^^ independently rather than relying on resources external to the pod 7804 to operate. A pod 7804 

[Q may cache content received from external sources, such as farms 7802 or the Intemet 765, 
making frequently requested information readily available to the local service or information 
recipients served by the pod 7804. In this way, pods 7804 are particularly usefiil in providing 
services that are independent of other processes and servers such as, for example, routing to other 

12 localized resources or recipients, providing access to keywords and geographically specific 
content, providing access to routinely accessed information, and downloading certain software 

C3 and graphical interface updates with reduced processing time and congestion. The determination 
of which servers and processes are located in the pod 7804 is made by the OSP according to load 

20 distribution, frequency of requests, demographics, and other factors. 

In addition to farms 7802 and pods 7804, the implementation of Fig. 7 also includes one 
or more non-podded and non-farmed servers 7806. In general, the servers 7806 may be 
dedicated to performing a particular service or information that relies on other processes and 
services for information and may be directly or indirectly connected to resources outside of the 

25 OSP host complex 780, such as the Intemet 765 and the IM host complex 790, through an OSP 
gateway 7808 within OSP host complex gateway 785. In the event that subscriber usage of a 
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particular service or information of the servers 7806 becomes relatively high, those servers 7806 
may be integrated into a farm or pod as appropriate. 

In the implementation of Fig. 7, one particular exemplary pod 7810 is shown in more 
detail. Pod 7810 includes a routing processor 7812. In a packet-based implementation, the cHent 
5 system 705 may generate information requests, convert the requests into data packets, sequence 
the data packets, perform error checking and other packet-switching techniques, and transmit the 
data packets to the routing processor 7812. Upon receiving data packets from the client system 
705, the routing processor 7812 may directly or indirectly route the data packets to a specified 
destination within or outside of the OSP host complex 780. In general, the routing processor 
y 78 12 will examine an address field of a data request, use a mapping table to determine the 
tn appropriate destination for the data request, and direct the data request to the appropriate 
£□ destination. 

For example, in the event that a data request from the client system 705 can be satisfied 

^ ^ locally, the routing processor 7812 may direct the data request to a local server 7814 in the pod 
7810. In the event that the data request cannot be satisfied locally, the routing processor 7812 

12 may direct the data request internally to one or more farms 7802, one or more other pods 7804, 
or one or more non-podded servers 7806 in the OSP host complex 780, or the routing processor 

C3 7812 may direct the data request externally to elements such as the IM host complex 790 through 
an OSP/pod gateway 7816. 

20 The routing processor 7812 also may direct data requests and/or otherwise facilitate 

communication between the client system 705 and the Internet 765 through the OSP/pod 
gateway 7816. In one implementation, the client system 705 uses an OSP client application to 
convert standard Internet content and protocols into OSP protocols and vice versa, where 
necessary. For example, when a browser application transmits a request in a standard Internet 

25 protocol, the OSP client application can intercept the request, convert the request into an OSP 
protocol and send the converted request to the routing processor 7812 in the OSP host complex 
780. The routing processor 7812 recognizes the Intemet 765 as the destination and routes the 
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data packets to an Internet Protocol (IP) tunnel 7818. The IP tunnel 7818 converts the data from 
the OSP protocol back into standard Internet protocol and transmits the data to the Internet 765. 
The IP tunnel 7818 also converts the data received from the Internet in the standard Internet 
protocol back into the OSP protocol and sends the data to the routing processor 7812 for delivery 
5 back to the client system 705. At the client system 705, the OSP client application converts the 
data in the OSP protocol back into standard Internet content for conmiunication with the browser 
application. 

The IP tunnel 7818 may act as a buffer between the client system 705 and the Internet 
765, and may implement content filtering and time saving techniques. For example, the IP 
y tunnel 7818 can check parental controls settings of the client system 705 and request and 
Cn transmit content from the Internet 765 according to the parental control settings. In addition, the 
£g IP tunnel 7818 may include a number a caches for storing frequently accessed information. If 
requested data is determined to be stored in the caches, the IP tunnel 7818 may send the 
information to the client system 705 from the caches and avoid the need to access the Internet 
Is 765. 

12 In another implementation, the client system 705 may use standard Internet protocols and 

Jl: formatting to access pods 7810 and the Internet 765. For example, the subscriber can use an 
C3 OSP TV client application having an embedded browser application installed on the client 

system 705 to generate a request in standard Intemet protocol, such as HyperText Transport 
20 Protocol (HTTP). In a packet-based implementation, data packets may be encapsulated inside a 
standard Intemet tunneling protocol, such as, for example. User Datagram Protocol (UDP), and 
routed to a web tunnel 7820. The web tunnel 7820 may be a Layer Two Txmneling Protocol 
(L2TP) timnel capable of establishing a point-to-point protocol (PPP) session with the client 
system 705. The web timnel 7820 provides a gateway to the routing processor 7812 within the 
25 pod 7810, the Intemet 765, and a web proxy 7822. 

The web proxy 7822 can look up subscriber information from the IP address of the client 
system 705 to determine demographic information such as the subscriber's parental control 
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settings. In this way, the web proxy 7822 can tailor the subscriber's content and user interfaces. 
The web proxy 7822 can also perform caching functions to store certain Uniform Resource 
Locators (URLs) and other electronic content so that the web proxy 7822 can locally deliver 
information to the cUent system 705 and avoid the need to access the hitemet 765 in the event 
5 that data requested by the client system 705 has been cached. 

Referring to Fig. 8, a communications system 800 is capable of delivering and 
exchanging information between a client system 805 and a host system 810 through a 
conraiunication link 815. CUent system 805 typically includes one or more client devices 820 
and one or more client controllers 825 for controlling the client devices 820. Host system 810 
y typically includes one or more host devices 835 and one or more host controllers 840 for 
Cn controlling the host devices 835. The communications link 815 may include communication 
[□ pathways 850, 855 enabling communications through the one or more delivery networks 860. 
"^I As shown, the client system 805 may access the Internet 865 through the host system 810. 
ru Examples of each element within the communication system of Fig. 8 are broadly 

iS described above with respect to Figs. 4-7. In particular, the client system 805 and the 
12 communications link 815 typically have attributes comparable to those described with respect to 
J]j client systems 405, 505, 605, and 705 and communications links 415, 515, 615, and 715 of Figs. 
[3 4-7, respectively. Likewise, the host system 810 of Fig. 8 may have attributes comparable to and 

may illustrate one possible embodiment of the host systems 410, 510, 610, and 710 shown in 
20 Figs. 4-7, respectively. However, Fig. 8 describes an aspect of the host system 810, focusing 
primarily on one particular implementation of IM host complex 890. 

The cUent system 805 includes a client device 820 and a client controller 825. The client 
controller 825 is generally capable of estabUshing a connection to the host system 810, including 
the OSP host complex 880, the IM host complex 890 and/or the Intemet 865. In one 
25 implementation, the client controller 825 includes an IM application for conraiunicating with 
servers in the IM host complex 890 utihzing exclusive IM protocols. The client controller 825 
also may include applications, such as an OSP client application and/or an Intemet browser 
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application, for communicating with elements such as the OSP host complex 880 and the Internet 
865. 

The host system 810 includes a host device 835 and a host controller 840. The host 
controller 840 is generally capable of transmitting instructions to any or all of the elements of the 
5 host device 835. For example, in one implementation, the host controller 840 includes one or 
more software applications loaded on one or more elements of the host device 835. However, in 
other implementations, as described above, the host controller 840 may include any of several 
other programs, machines, and devices operating independently or collectively to control the host 
device 835. 

y The host system 810 includes a login server 870 capable of enabling communications 

Cn between client systems 805 and various elements of the host system 810, including elements 

EG 

such as the OSP host complex 880 and IM host complex 890; login server 870 is also capable of 
authorizing access by the client system 805 and those elements. The login server 870 may 

f y implement one or more authorization procedures to enable simultaneous access to one or more of 

M the elements. The OSP host complex 880 and the IM host complex 890 are connected through 
one or more host complex gateways 885 and one or more IM host complex gateways 895. Each 
OSP host complex gateway 885 and IM host complex gateway 895 may perform any protocol 

C3 conversions necessary to enable communication between the OSP host complex 880, the IM host 
complex 890, and the Intemet 865. 

20 To access the IM host complex 890 to begin an instant messaging session, the client 

system 805 establishes a connection to the login server 870. The login server 870 typically 
determines whether the particular subscriber is authorized to access the IM host complex 890 by 
verifying a subscriber identification and password. If the subscriber is authorized to access the 
IM host complex 890, the login server 870 employs a hashing technique on the subscriber's 

25 screen name to identify a particular IM server 8902 for use during the subscriber's session. The 
login server 870 provides the client system 805 with the IP address of the particular IM server 
8902, gives the client system 805 an encrypted key (that is, a cookie), and breaks the connection. 
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The client system 805 then uses the EP address to establish a connection to the particular EVI 
server 8902 through the communications link 815, and obtains access to that IM server 8902 
using the encrypted key. Typically, the client system 805 will be equipped with a Winsock 
Application Programming Interface (API) that enables the cUent system 805 to establish an open 
5 TCP connection to the IM server 8902. 

Once a connection to the IM server 8902 has been established, the client system 805 may 
directly or indirectly transmit data to and access content from the IM server 8902 and one or 
more associated domain servers 8904. The IM server 8902 supports the fundamental instant 
messaging services and the domain servers 8904 may support associated services, such as, for 
l| example, administrative matters, directory services, chat and interest groups. The domain servers 
in 8904 can be used to lighten the load placed on the EM server 8902 by assuming responsibility for 
f 5 some of the services within the IM host complex 890. By accessing the IM server 8902 and/or 
""I the domain server 8904, a subscriber can use the EM client application to view whether particular 
fy subscribers (or buddies) are online, exchange instant messages with particular subscribers, 
pi participate in group chat rooms, trade files such as pictures, invitations or documents, find other 
ll subscribers with similar interests, get customized news and stock quotes, and search the Web. 
^ij In the implementation of Fig. 8, IM server 8902 is directly or indirectly connected to a 

C3 routing gateway 8906. The routing gateway 8906 facilitates the connection between the IM 

server 8902 and one or more alert multiplexors 8908. For example, routing gateway 8906 may 
20 serve as a link minimization tool or hub to connect several EM servers 8902 to several alert 
multiplexors 8908. In general, an alert multiplexor 8908 maintains a record of alerts and 
subscribers registered to receive the alerts. 

Once the client system 805 is connected to the alert multiplexor 8908, a subscriber can 
register for and/or receive one or more types of alerts. The connection pathway between the 
25 client system 805 and the alert multiplexor 8908 is determined by employing a hashing technique 
at the IM server 8902 to identify the particular alert multiplexor 8908 to be used for the 
subscriber's session. Once the particular multiplexor 8908 has been identified, the IM server 
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8902 provides the client system 805 with the EP address of the particular alert multiplexor 8908 
and gives the client system 805 an encrypted key (that is, a cookie) used to gain access to the 
identified multiplexor 8908. The client system 805 then uses the IP address to connect to the 
particular alert multiplexor 8908 through the communication link 815 and obtains access to the 
5 alert multiplexor 8908 using the encrypted key. 

The alert multiplexor 8908 is connected to an alert gate 8910 that, like the IM host 
complex gateway 895, is capable of performing the necessary protocol conversions to enable 
communication with the OSP host complex 880. The alert gate 8910 is the interface between the 
IM host complex 890 and the physical servers, such as servers in the OSP host complex 880, 

y where state changes are occurring. In general, the information regarding state changes will be 
gathered and used by the EM host complex 890. However, the alert multiplexor 8908 also may 

fh communicate with the OSP host complex 880 through the IM gateway 895, for example, to 
provide the servers and subscribers of the OSP host complex 880 with certain information 
gathered from the alert gate 8910. 

p The alert gate 8910 can detect an alert feed corresponding to a particular type of alert. 

l2 The alert gate 8910 may include a piece of code (alert receive code) capable of interacting with 
another piece of code (alert broadcast code) on the physical server where a state change occurs. 

C3 In general, the alert receive code installed on the alert gate 8910 instructs the alert broadcast code 
installed on the physical server to send an alert feed to the alert gate 8910 upon the occurrence of 

20 a particular state change. Thereafter, upon detecting an alert feed, the alert gate 8910 contacts 
the alert multiplexor 8908, which in tum, informs the appropriate client system 805 of the 
detected alert feed. 

In the implementation of Fig. 8, the IM host complex 890 also includes a subscriber 
profile server 8912 connected to a database 8914 for storing large amoimts of subscriber profile 
25 data. The subscriber profile server 8912 may be used to enter, retrieve, edit, manipulate, or 
otherwise process subscriber profile data. In one implementation, a subscriber's profile data 
includes, for example, the subscriber's buddy list, alert preferences, designated stocks, identified 
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interests, geographic location and other demographic data. The subscriber may enter, edit and/or 
delete profile data using an installed IM client application on the client system 805 to interact 
with the subscriber profile server 8912. 

Because the subscriber's data is stored in the IM host complex 890, the subscriber does 
5 not have to reenter or update such information in the event that the subscriber accesses the IM 
host complex 890 using a new or different client system 805. Accordingly, when a subscriber 
accesses the IM host complex 890, the IM server 8902 can instruct the subscriber profile server 
8912 to retrieve the subscriber's profile data fi^om the database 8914 and to provide, for example, 
the subscriber's buddy list to the IM server 8902 and the subscriber's alert preferences to the alert 
y multiplexor 8908. The subscriber profile server 8912 also may commimicate with other servers 
in in the OSP host complex 890 to share subscriber profile data with other services. Alternatively, 

^ n 
E ; = 

ca user profile data may be saved locally on the cUent device 805. 
'Z Referring to Fig. 9, a communications system 900 is capable of delivering and 

exchanging information between a client system 905 and a host system 910 through a 
is communication link 915. Ghent system 905 typically includes one or more chent devices 920 
12 and one or more client controllers 925 for controlling the client devices 920. Host system 910 
]l; typically includes one or more host devices 935 and one or more host controllers 940 for 
C3 controlling the host devices 935. The commimications link 915 may include conmiunication 
pathways 950, 955 enabling communications through the one or more delivery networks 960. 
20 Examples of each element within the communication system of Fig. 9 are broadly 

described above with respect to Figs. 4-8. In particular, the client system 905 and the 
communications link 915 typically have attributes comparable to those described with respect to 
client systems 405, 505, 605, 705 and 805 and communications links 415, 515, 615, 715 and 815 
of Figs. 4-8, respectively. Likewise, the host system 910 of Fig. 9 may have attributes 
25 comparable to and may illustrate one possible embodiment of the host systems 410, 510, 610, 
710 and 810 shown in Figs. 4-8, respectively. However, Fig. 9 describes several aspects of one 
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implementation of the host system 910 in greater detail, focusing primarily on one particular 
implementation of the login server 970 and IM host complex 990. 

The client system 905 includes a client device 920 and a client controller 925. The client 
controller 925 is generally capable of establishing a connection to the host system 910, including 
the IM host complex 990. In one implementation, the client controller 925 includes an IM 
application for communicating v^ith servers in the IM host complex 990 utilizing exclusive IM 
protocols. 

The host system 910 includes a host device 935 and a host controller 940. The host 
controller 940 is generally capable of transmitting instructions to any or all of the elements of the 
host device 935. For example, in one implementation, the host controller 940 includes one or 
more software applications loaded on one or more elements of the host device 935. However, in 
other implementations, as described above, the host controller 940 may include any of several 
other programs, machines, and devices operating independently or collectively to control the host 
device 935. 

The host system 910 includes a login server 970 capable of enabling communications 
between client systems 905 and various elements of the host system 910, including elements 
such as the IM host complex 990 and the OSP host complex 980; login server 970 is also capable 
of authorizing access by the client system 905 and those elements. The IM host complex 990 
includes an IM server network 9902, a routing gateway 9906, an alert multiplexor network 9908, 
and one or more alert gates 9910. The IM server network 9902 may include an intercoimected 
network of IM servers and the alert multiplexor network 9908 may include an interconnected 
network of alert multiplexors. In the implementation of Fig. 9, the IM server network 9902 and 
the alert multiplexor network 9908 are interconnected by a routing gateway 9906 that serves as a 
common hub to reduce the number of connections. Each IM server within IM server network 
9902 can directly or indirectly communicate and exchange information with one or more of the 
alert multiplexors in the alert multiplexor network 9908. Each of the alert multiplexors in the 
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alert multiplexor network 9908 may be comiected to several alert gates 9910 that receive 
different types of alerts. 

During a session, a subscriber typically will be assigned to one IM server in the IM server 
network 9902 and to one alert multiplexor in the alert multiplexor network 9908 based on one or 
5 more hashing techniques. In one implementation, for example, each IM server in the IM server 
network 9902 may be dedicated to serving a particular set of registered subscribers. Because all 
of the IM servers can communicate with each other, all subscribers can communicate with each 
other through instant messaging. However, the IM servers and the alert multiplexors are capable 
of storing subscriber information and other electronic content that may be accessed by the other 
l| IM servers and alert multiplexors. Thus, in another implementation, each alert multiplexor in the 
in alert multiplexor network 9908 may be dedicated to storing information about a particular set or 
f g subset of alerts. Because all of the alert multiplexors can commimicate with each other, all 

registered subscribers can receive all types of alerts. This networking arrangement enables the 
ry load to be distributed among the various servers in the IM host complex 990 while still enabling 
pj a subscriber to communicate, share information, or otherwise interact with other subscribers and 
ll servers in the IM host complex 990. 

Referring also to Fig. 10, a host device (or a client device) interacts with one or more 
I J client devices according to procedure 1000 to prevent a user from capturing online content, such 
as, for example, an image, sensitive or classified text, audio, or video. The procedure 1000 may 
20 be implemented by any type of hardware, software, device, computer, computer system, 

equipment, component, program, application, code, storage medium, or propagated signal. In 
one implementation, procedure 1000 is performed by a Java applet, which is an application 
program that runs inside a client device. When the user on a client device visits a webpage 
containing a Java applet, the Java applet is downloaded automatically from a host server to the 
25 client device, and the Java applet is then run automatically in the client's browser. 

The procedure 1000 may be performed in any computer environment in which a user 
wishes to access electronic content. Thus, for example, the procedure 1000 may be implemented 
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in a software package that a user accesses or operates from a home computer while offline. In 

this way, the producers of the software prevent certain content in the application program from 

being captured by the user. 

The procedure 1000 may be implemented in any programming language, including, for 
5 example, machine language, assembly language, HTML, Fortran, C, BASIC, Visual Basic, or 

any other high-level language. 

Examples of the elements that may perform procedure 1000 may be broadly described 

above with respect to Figs. 4-9. In particular, the cHent devices typically have attributes 

comparable to those described with respect to client devices 420, 520, 620, 720, 820, and 920 
\6 and the host device typically has attributes comparable to those described with respect to host 

devices 435, 535, 635, 735, 835, and 935. The client devices and/or the host device may be 
iQ directly or indirectly interconnected through any type of delivery network described herein. In 

this manner, the procedure 1000 of Fig. 10 may be performed by devices such as client devices 

420, 520, 620, 720, 820, or 920 and host devices 435, 535, 635, 735, 835, or 935. 
M To prevent unauthorized access to content, access providers with electronic content and 

11 information to protect may set preferences regulating the ability of access seekers who perceive 

content (for example, a user who views an image or listens to audio) to capture the content (for 
C3 example, an image may be saved or audio may be recorded). Typically, the access provider that 

wishes to protect content will be presented with a Graphical User Interface (GUI) and will use 
20 that GUI to select among various capture preferences including, for example, the conditions for 

making content available to access seekers and the directory where the available content is 

stored. An access provider's capture preferences may be maintained locally or on a host device. 
In one implementation, the host device (it should be understood that the client device or 

any other type of medium may also or alternatively perform this procedure) presents information 
25 that indicates the location of content that is potentially accessible, though not presently 

perceivable (step 1005). The host device receives a request from an access seeker to access the 

content (step 1010). The host device determines whether the request from the user is valid (step 
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1015). If the request from the user is vaUd, the host device enables the user to perceive the 
content (step 1020). For example, if the content is an image, the host device enables the user to 
view the image. If the content is an audio signal, the host device enables the user to listen to the 
audio signal. While the user perceives the content, the host prevents the user from capturing the 
5 content (step 1025). For example, the host may prevent the user from saving and copying an 
image v^hile that user is viewing the image. After the user finishes requesting the content, the 
host device removes the content so that the user may no longer perceive the content (step 1030) 
and presents information that indicates the potentially accessible content (step 1005). 

Figs. 1 1-16 are successive screenshots illustrating the process 1000 for allowing users to 
10 view online digital images while preventing the images from being captured by copying or 

Cri saving. 

CO 

rg Fig. 1 1 shows an instance of a browser window 1 100 displaying a webpage 1 102 at a 

specified URL 1 104 (for example, http://hometown.aol.com/dmscrance) . Cursor 1 106 in this 
screenshot is positioned within the browser window 1 100. The webpage 1 102 presents a display 

M . area 1108 that may include text providing the user with an option to view an underlying or 
associated image, for example, the text may instruct, "CLICK TO VIEW IMAGE." 

When the user positions the cursor 1 106 on top of the display area 1 108 and clicks the 

C3 mouse button, an image 1 1 10 is displayed as shown in Fig. 12. As soon as the user releases the 
mouse button, the image 1110 disappears and the screen resumes the appearance shown in Fig. 

20 11. 

Accordingly, the only way that the user can view the image 1 1 10 is to click and hold the 
mouse button with the cursor 1 106 on the display area 1 108. While the mouse button is pressed, 
the image 1 1 10 is displayed but other browser functions are unavailable. For instance, while 
pressing the mouse button, a user is unable to print or save the webpage 1 102 by accessing the 
25 File menu 1112. Accordingly, the user is unable to use the File save or print features of the 

browser to capture the image 1110 because the only time that the File save operation is available 
to the user is when the mouse button is released and the image has disappeared, 
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Moreover, as shown in Fig. 13, the user is unable to use the browser's right-click feature 
to save or print a copy of the image. Ordinarily, in many browser apphcations, cHcking the 
mouse's right button while the cursor 1 106 is positioned over an image 1110 brings up a menu, 
such as menu 1 1 14 in Fig. 13, that provides the user with several options including printing 
and/or saving the image. However, the right-click menu 1 1 14 is not available when the user 
ab-eady is holding down the mouse's left button, which as noted above, is the only time that the 
image 1 1 10 is displayed. Accordingly, the user cannot use the right-click menu to print or save 
the image 1110. If the user right-clicks the mouse button while the cursor 1 106 is positioned 
over the display area 1 108 (that is, where the image would appear if the left mouse button was 
depressed while atop the display area 1 108), the resulting menu 1114 provides no option for 
saving an image because the cursor 1 106 is not atop a presently displayed image. Moreover, if 
the user selects the Print option 1116 from the menu 1114, the resulting hard copy print will 
appear similar to what is shown in Fig. 13 - that is, the print out will not include the image 1110 
shown in Fig. 12. 

Details for implementing the mechanisms and techniques discussed above follow. In 
particular, a source code listing is set forth below for a Java applet that was used to generate the 
screenshots of Figs. 11-13. 

A first design parameter for the implementation is that the single image/applet should be 
made secure for multiple clients and/or servers. 

A second design parameter for the implementation is that the actual applet that is 
displaying the image preferably would be displayed in a frame. The text in the frame may, for 
example, be "CLICK". The image is displayed only when the users clicks and holds the mouse 
button. When the mouse button is released, the image is no longer displayed. Regarding this 
second design parameter, owners of images are often concemed with the security of their image 
files, as well as with the ability of others to print the images. By requiring users to hold down 
their mouse buttons to view images, the users' ability to do a File - Print is effectively disabled. 
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The source code for the Java applet is as follows: 

import j ava . awt . * ; 

import java. applet .Applet ; 

import j ava . awt . event , * ; 

class ImageCanvas extends Canvas { 
Image image ; 

Dimension pref erredSize ; 
int w,h; 



i){ } 
-1) { } 

} 

public Dimension getMinimumSize ( ) { 
return pref erredSize; 

} 

public Dimension getPref erredSize { ) { 
return pref erredSize; 

} 

public void paint (Graphics g) { 

g . drawlmage ( image , 0 , 0 , this); 

} 

} 



ImageCanvas (Image img) { 
image = img; 

while ( (w = image .getwidth (this) ) == - 
while ( (h = image. getHeight (this) ) == 
pref erredSize = new Dimension (w, h) ; 



public class ImageApplet extends Applet 
{ 

Button buttonl = new Button ( "PRESS AND HOLD BUTTON TO VIEW IMAGE"); 
Panel mainPanel = new Panel (); 
Panel buttonPanel = new Panel () ; 
CardLayout cardLO = new CardLayout ( ) ; 
ImageCanvas ic2 ; 

Label label = new Label ( "default label"); 



public void initO { 

setLayout (new BorderLayout () ) ; 

buttonl .addMouseListener (new ButtonHandler ( ) ) ; 
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buttonPanel .add(buttonl) ; 
add ( "North" , buttonPanel ) ; 
mainPanel . setLayout (cardLO) ; 
Panel ic2Panel = new Panel () ; 
Panel blankPanel = new Panel (); 

Image image2 = getlmage (getCodeBase ( ) , "a_emmitt.jpg"); 

ImageCanvas ic2 = new ImageCanvas (image2 ) ; 

ic2Panel.add(ic2) ; 

mainPanel. add {"ic2", ic2Panel) ; 

mainPanel .add { "blank" , blankPanel) ; 

add ("Center", mainPanel) ; 

cardLO . show (mainPanel , "blank" ) ; 

} 

class ButtonHandler extends MouseAdapter { 

public void mousePressed (MouseEvent e) { 
cardLO . show (mainPanel , " ic2 " ) ; 

} 

public void mouseReleased (MouseEvent e) { 
cardLO . show (mainPanel , "blank") ; 

} 

} 

} 

It should be understood that the above detailed description and specific examples are 
given by way of illustration only, since various changes and modifications will become apparent 
to those skilled in the art fi-om this detailed description. 

For brevity, several elements in the figures described above are represented as monolithic 
entities. As would be understood by one skilled in the art, however, these elements each may 
include numerous interconnected computers and components designed to perform a set of 
specified operations and/or dedicated to a particular geographical region. 

The techniques, methods, and systems described here may find applicability in any 
computing or processing environment in which digital images can be viewed, generated, copied 
or otherwise manipulated. Various implementations of the systems and techniques described 
here may be realized in digital electronic circuitry, or in computer hardware, firmware, software, 
or in combinations thereof. A system or other apparatus that uses one or more of the techniques 
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and methods described here may be implemented as a computer-readable storage medium, 
configured with a computer program, where the storage medium so configured causes a 
computer system to operate on input and/or generate output in a specific and predefined manner. 
Such a computer system may include one or more programmable processors that receive data 
and instructions fi"om, and transmit data and instructions to, a data storage system, and suitable 
input and output devices. Each computer program may be implemented in a high-level 
procedural or object-oriented programming language, or in assembly or machine language if 
desired; and in any case, the language may be a compiled or interpreted language. Suitable 
processors include, by way of example, both general and special purpose microprocessors. 

Generally, a processor will receive instructions and data fi-om a read-only memory and/or 
a random access memory. Storage deices suitable for tangibly embodying computer instructions 
and data include all forms of non- volatile memory, including semiconductor memory devices, 
such as EPROM, EEPROM, and flash memory devices; magnetic disks such as internal hard 
disks and removable disks; magneto-optical disks; and CD-ROM disks. 

These elements also can be found in a conventional desktop or workstation computer as 
well as other computers suitable for executing computer programs implementing the methods 
described here, which can be used in conjunction with any content viewing or manipulation 
software, or any other software capable of displaying portions of a larger body of content. Any 
of the foregoing may be supplemented by, or implemented in, specially designed ASICs 
(application specific integrated circuits). 

A number of embodiments have been described. Nevertheless, it will be understood that 
advantageous results still could be achieved if steps of the disclosed techniques were performed 
in a different order and/or if components in the disclosed systems were combined in a different 
manner and/or replaced or supplemented by other components. Accordingly, other embodiments 
are within the scope of the following claims. 

For example, as shown in the successive screenshots of Figs. 14-16, the output of the 
Java applet may include a button 1118 labeled "PRESS AND HOLD BUTTON TO VIEW 
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IMAGE." When the user positions the cursor 1 106 on top of the button 1118 and clicks the 
mouse button, the image 1 1 10 is displayed as shown in Fig. 15. As soon as the user releases the 
mouse button, the image 1110 disappears and the screen would appear as in Fig. 14. 

Accordingly, the user views the image 1 1 10 by clicking and holding the cursor 1 106 on 
the button 1118. Moreover, as shown in Fig. 16, the user is unable to use the browser's right- 
click feature to save or print a copy of the image. If the user right-clicks the mouse button while 
the cursor 1 106 is positioned over the display area 1 108 (that is, where the image would appear if 
the left mouse button was depressed while atop the button 1118), the resulting menu 1114 
provides no option for saving an image because the cursor 1 106 is not atop a presently displayed 
image. 
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